Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
File: 5ACF72DA32919503D15480832BA57EB063AE113B.cer (raw, json)
Hash identifier: uaq0lqmVpeZvIhYOypew3tJ2jTIx/Jl4cyKoWZ+FpDE=
Subject key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 0A2F7E9C9721AC7AFE6BB50787186B45063EC5DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 01 Jul 2026 02:01:14 +0000
Certificate not after: Wed 30 Jun 2027 02:06:14 +0000
Subordinate resources: AS: 59037
AS: 137803
IP: 43.225.180.0/22
IP: 43.227.152.0 -- 43.227.156.255
IP: 43.227.158.0 -- 43.227.183.255
IP: 43.227.192.0/19
IP: 43.228.0.0 -- 43.228.6.255
IP: 43.228.8.0 -- 43.228.31.255
IP: 43.228.40.0 -- 43.228.71.255
IP: 43.230.72.0/22
IP: 103.44.144.0/22
IP: 103.46.12.0 -- 103.46.68.255
IP: 103.46.72.0 -- 103.46.139.255
IP: 103.49.108.0/22
IP: 2403:1f80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:2f:7e:9c:97:21:ac:7a:fe:6b:b5:07:87:18:6b:45:06:3e:c5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jul 1 02:01:14 2026 GMT
Not After : Jun 30 02:06:14 2027 GMT
Subject: CN=5ACF72DA32919503D15480832BA57EB063AE113B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:6a:ae:fe:25:97:0a:a2:91:6e:0e:20:cb:
f7:ef:0c:07:4a:be:c5:cc:6a:c6:95:3f:0b:21:bc:
3d:fa:ef:fd:f7:06:95:46:16:48:01:14:ff:8d:98:
63:d0:c1:1a:5c:1f:5d:99:f2:d7:a6:28:e8:3b:6b:
da:05:f3:91:58:3a:0d:14:af:6f:e4:36:09:f5:f8:
93:3a:d0:12:94:e5:9d:8d:b7:c5:8a:ac:b4:98:9d:
eb:5b:26:b4:a0:20:12:9d:48:04:8b:72:15:7b:53:
7f:9d:4f:59:17:c7:59:d6:2a:ae:73:4e:76:d2:9c:
8f:c4:08:bb:62:df:da:21:2a:6e:58:e7:66:96:60:
ea:87:70:af:4c:35:c3:90:76:24:02:e2:b6:57:c5:
c4:30:59:67:12:84:cd:8b:c6:84:45:15:3a:a5:7d:
23:05:b9:5d:45:f8:38:33:9f:6a:a2:7e:82:68:a1:
ca:66:ab:b0:e4:81:36:2d:ea:c4:ae:35:65:21:d6:
51:ef:69:d9:28:6f:c2:57:48:c5:82:f9:ae:08:6e:
ad:e3:04:b5:a3:12:7a:91:77:ea:cd:41:8c:7d:48:
5d:91:e9:07:6c:d8:26:ca:9d:f4:21:b3:43:7f:2a:
f7:e0:56:1d:8c:db:b5:e0:ac:fc:12:36:7a:3c:78:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.180.0/22
43.227.152.0-43.227.156.255
43.227.158.0-43.227.183.255
43.227.192.0/19
43.228.0.0-43.228.6.255
43.228.8.0-43.228.31.255
43.228.40.0-43.228.71.255
43.230.72.0/22
103.44.144.0/22
103.46.12.0-103.46.68.255
103.46.72.0-103.46.139.255
103.49.108.0/22
IPv6:
2403:1f80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59037
137803
Signature Algorithm: sha256WithRSAEncryption
49:49:e4:60:b7:64:55:ba:0a:5d:d9:23:a1:c4:8c:39:0a:30:
4b:ff:2e:7a:e9:9d:66:e0:f3:68:23:a8:f3:b6:13:b6:a2:13:
80:84:0d:9f:5b:38:65:16:c5:61:cf:62:45:56:ee:39:bc:0c:
4b:d2:84:2d:44:8d:61:07:73:66:02:56:55:de:17:53:64:38:
3f:bb:4a:63:85:f4:85:50:3a:4e:57:b2:c0:be:2e:f2:d5:4c:
b5:f6:a1:bf:79:0c:b9:bc:ad:e5:0f:75:d7:e8:71:df:59:f8:
ee:f7:11:01:21:f0:d4:c0:b2:28:31:55:7c:2c:11:f5:7f:eb:
24:39:8f:69:fd:1f:8a:c5:bf:d7:ce:57:65:73:e0:1a:3b:e2:
00:45:48:31:dc:2e:f0:15:ce:ff:9a:7a:8b:a7:bd:ee:9a:e6:
46:f5:ad:a1:f0:fd:1b:f3:5c:6b:09:2c:7f:a3:e0:84:8d:26:
a9:00:71:b2:47:7f:9a:63:66:6c:45:77:10:3f:d2:22:b7:94:
06:69:8c:78:0a:29:b1:be:28:7d:60:50:44:89:b5:24:7b:9e:
d1:ce:e0:ad:c6:24:16:ef:09:34:f0:17:19:da:4c:ea:b4:0f:
ba:00:9b:30:2d:5a:d0:d0:24:c8:ff:fa:50:cb:34:54:14:48:
53:71:a6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 19:09:59 2026 by rpki-client